OTL logfile created on: 2011-07-03 18:11:49 - Run 1 OTL by OldTimer - Version 3.2.25.0 Folder = F:\Documents and Settings\Przemek\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,42 Gb Available Physical Memory | 71,04% Memory free 3,85 Gb Paging File | 3,40 Gb Available in Paging File | 88,38% Paging File free Paging file location(s): F:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = F: | %SystemRoot% = F:\WINDOWS | %ProgramFiles% = F:\Program Files Drive C: | 124,01 Gb Total Space | 56,45 Gb Free Space | 45,52% Space Free | Partition Type: NTFS Drive D: | 124,01 Gb Total Space | 34,73 Gb Free Space | 28,01% Space Free | Partition Type: NTFS Drive F: | 50,08 Gb Total Space | 5,49 Gb Free Space | 10,95% Space Free | Partition Type: NTFS Computer Name: SZELAG-ACC2CA0F | User Name: Przemek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-07-03 18:00:23 | 000,580,096 | ---- | M] (OldTimer Tools) -- F:\Documents and Settings\Przemek\Pulpit\OTL.exe PRC - [2011-07-01 11:39:25 | 001,242,448 | ---- | M] (Valve Corporation) -- F:\Program Files\Steam\Steam.exe PRC - [2011-06-23 15:55:41 | 000,924,632 | ---- | M] (Mozilla Corporation) -- F:\Program Files\Mozilla Firefox\firefox.exe PRC - [2011-05-10 14:10:58 | 003,459,712 | ---- | M] (AVAST Software) -- F:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2011-05-10 14:10:57 | 000,042,184 | ---- | M] (AVAST Software) -- F:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2010-04-01 11:16:20 | 000,357,696 | ---- | M] (DT Soft Ltd) -- F:\Program Files\DAEMON Tools Lite\DTLite.exe PRC - [2009-12-08 11:27:10 | 001,503,232 | ---- | M] (Nokia) -- F:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe PRC - [2009-07-01 18:37:06 | 000,037,888 | ---- | M] () -- F:\Program Files\Winamp\winampa.exe PRC - [2008-12-03 14:51:30 | 002,181,672 | ---- | M] (Gainward Co.) -- F:\Program Files\EXPERTool\TBPANEL.exe PRC - [2008-07-17 13:21:34 | 000,080,392 | ---- | M] () -- F:\Program Files\Gigabyte\EasySaver\essvr.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- F:\WINDOWS\explorer.exe PRC - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) -- F:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe PRC - [2007-01-30 12:02:28 | 000,303,104 | ---- | M] (FUJIFILM Corporation) -- F:\Program Files\FinePixViewerS\QuickDCF2.exe PRC - [2006-02-01 16:45:54 | 000,098,304 | ---- | M] (Nero AG) -- F:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-07-03 18:00:23 | 000,580,096 | ---- | M] (OldTimer Tools) -- F:\Documents and Settings\Przemek\Pulpit\OTL.exe MOD - [2011-05-10 14:10:55 | 000,199,792 | ---- | M] (AVAST Software) -- F:\Program Files\Alwil Software\Avast5\snxhk.dll MOD - [2010-08-23 18:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- F:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2011-06-29 05:47:47 | 003,435,096 | ---- | M] () [Auto | Running] -- f:\Program Files\Common Files\Akamai\netsession_win_e477fed.dll -- (Akamai) SRV - [2011-05-10 14:10:57 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- F:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2010-06-17 18:37:00 | 003,591,496 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- F:\WINDOWS\System32\GameMon.des -- (npggsvc) SRV - [2009-12-15 22:07:16 | 000,025,832 | ---- | M] (BioWare) [On_Demand | Stopped] -- C:\Program Files\Dragon Age\bin_ship\daupdatersvc.service.exe -- (DAUpdaterSvc) SRV - [2009-10-27 09:26:36 | 000,657,408 | ---- | M] (Nokia) [On_Demand | Stopped] -- F:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2008-07-17 13:21:34 | 000,080,392 | ---- | M] () [Auto | Running] -- F:\Program Files\Gigabyte\EasySaver\ESSVR.EXE -- (ES lite Service) SRV - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] -- F:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-07-03 18:05:04 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- F:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2011-05-10 14:03:54 | 000,441,176 | ---- | M] (AVAST Software) [File_System | System | Running] -- F:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2011-05-10 14:03:44 | 000,307,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- F:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011-05-10 14:02:37 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- F:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011-05-10 14:02:25 | 000,102,616 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- F:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2011-05-10 13:59:56 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- F:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011-05-10 13:59:37 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- F:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2011-05-10 13:59:35 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- F:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2010-01-27 04:09:02 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- F:\WINDOWS\system32\drivers\npf.sys -- (npf) DRV - [2009-11-01 08:33:40 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- F:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2009-10-06 11:52:50 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2009-10-06 11:52:34 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2009-10-06 11:52:34 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2009-10-06 11:52:34 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2009-09-29 08:11:22 | 000,012,160 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- F:\WINDOWS\system32\drivers\lgbtport.sys -- (LgBttPort) DRV - [2009-09-29 08:11:20 | 000,012,928 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- F:\WINDOWS\system32\drivers\lgvmodem.sys -- (LGVMODEM) DRV - [2009-09-29 08:11:20 | 000,010,496 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- F:\WINDOWS\system32\drivers\lgbtbus.sys -- (lgbusenum) DRV - [2008-11-19 17:09:10 | 000,024,832 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem) DRV - [2008-11-19 17:09:08 | 000,019,968 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag) DRV - [2008-11-19 17:09:08 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus) DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-02-14 11:04:06 | 004,676,096 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- F:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008-01-03 16:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- F:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2007-03-16 10:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- F:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel) DRV - [2007-03-16 10:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\TBPanel.sys -- (Cardex) DRV - [2005-10-13 15:46:08 | 000,035,328 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- F:\WINDOWS\System32\drivers\sfsync03.sys -- (sfsync03) StarForce Protection Synchronization Driver (version 3.x) DRV - [2005-08-10 14:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- F:\WINDOWS\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x) DRV - [2005-05-16 15:23:38 | 000,019,968 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- F:\WINDOWS\System32\drivers\sfsync02.sys -- (sfsync02) StarForce Protection Synchronization Driver (version 2.x) DRV - [2005-05-16 15:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- F:\WINDOWS\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKCU\..\URLSearchHook: {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - F:\WINDOWS\system32\dvmurl.dll (DeviceVM Inc.) IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - F:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {ecdee021-0d17-467f-a1ff-c7a115230949} - F:\Program Files\free-downloads.net\prxtbfre0.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.selectedEngine: "" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "" FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:4.0.0 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2 FF - prefs.js..extensions.enabledItems: cssreloader@kenneth.io:1.0.2 FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100408.6 FF - prefs.js..network.proxy.backup.ftp: "127.0.0.1" FF - prefs.js..network.proxy.backup.ftp_port: 9666 FF - prefs.js..network.proxy.backup.gopher: "127.0.0.1" FF - prefs.js..network.proxy.backup.gopher_port: 9666 FF - prefs.js..network.proxy.backup.socks: "127.0.0.1" FF - prefs.js..network.proxy.backup.socks_port: 9666 FF - prefs.js..network.proxy.backup.ssl: "127.0.0.1" FF - prefs.js..network.proxy.backup.ssl_port: 9666 FF - prefs.js..network.proxy.ftp: "127.0.0.1" FF - prefs.js..network.proxy.ftp_port: 9666 FF - prefs.js..network.proxy.gopher: "127.0.0.1" FF - prefs.js..network.proxy.gopher_port: 9666 FF - prefs.js..network.proxy.http: "127.0.0.1" FF - prefs.js..network.proxy.http_port: 9666 FF - prefs.js..network.proxy.share_proxy_settings: true FF - prefs.js..network.proxy.socks: "127.0.0.1" FF - prefs.js..network.proxy.socks_port: 9666 FF - prefs.js..network.proxy.ssl: "127.0.0.1" FF - prefs.js..network.proxy.ssl_port: 9666 FF - prefs.js..network.proxy.type: 0 FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: F:\Program Files\Mozilla Firefox\components [2011-06-23 15:55:43 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: F:\Program Files\Mozilla Firefox\plugins [2011-06-25 14:36:18 | 000,000,000 | ---D | M] [2011-01-22 08:49:00 | 000,000,000 | ---D | M] (No name found) -- F:\Documents and Settings\Przemek\Dane aplikacji\Mozilla\Extensions [2011-06-25 14:36:16 | 000,000,000 | ---D | M] (No name found) -- F:\Documents and Settings\Przemek\Dane aplikacji\Mozilla\Firefox\Profiles\k15t5lb1.default\extensions [2011-05-03 04:22:50 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- F:\Documents and Settings\Przemek\Dane aplikacji\Mozilla\Firefox\Profiles\k15t5lb1.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-06-25 14:36:16 | 000,000,000 | ---D | M] (Vividas player plugin) -- F:\Documents and Settings\Przemek\Dane aplikacji\Mozilla\Firefox\Profiles\k15t5lb1.default\extensions\player@vividas.com [2011-02-26 19:40:02 | 000,002,566 | ---- | M] () -- F:\Documents and Settings\Przemek\Dane aplikacji\Mozilla\Firefox\Profiles\k15t5lb1.default\searchplugins\askcom.xml [2011-07-03 05:51:49 | 000,001,860 | ---- | M] () -- F:\Documents and Settings\Przemek\Dane aplikacji\Mozilla\Firefox\Profiles\k15t5lb1.default\searchplugins\search.xml [2011-06-09 05:36:00 | 000,000,000 | ---D | M] (No name found) -- F:\Program Files\Mozilla Firefox\extensions [2010-05-24 20:05:01 | 000,000,000 | ---D | M] (Java Console) -- F:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010-10-07 16:58:11 | 000,000,000 | ---D | M] (Java Console) -- F:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2011-01-01 13:00:29 | 000,000,000 | ---D | M] (Java Console) -- F:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011-04-27 05:55:22 | 000,000,000 | ---D | M] (Java Console) -- F:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-06-09 05:36:00 | 000,000,000 | ---D | M] (Java Console) -- F:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} File not found (No name found) -- [2009-06-03 15:00:03 | 000,000,000 | ---D | M] (Java Quick Starter) -- F:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2011-06-23 15:55:41 | 000,142,296 | ---- | M] (Mozilla Foundation) -- F:\Program Files\mozilla firefox\components\browsercomps.dll [2010-05-18 14:40:04 | 000,931,328 | ---- | M] (Ganymede Technologies) -- F:\Program Files\mozilla firefox\plugins\NPBOARDS.dll [2011-05-04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- F:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-06-20 15:47:30 | 000,189,088 | ---- | M] ( ) -- F:\Program Files\mozilla firefox\plugins\npVividasPlayer.dll [2011-05-08 08:51:20 | 000,002,767 | ---- | M] () -- F:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-05-08 08:51:20 | 000,001,406 | ---- | M] () -- F:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-05-08 08:51:20 | 000,000,917 | ---- | M] () -- F:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-05-08 08:51:20 | 000,000,858 | ---- | M] () -- F:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-05-08 08:51:20 | 000,001,183 | ---- | M] () -- F:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-05-08 08:51:20 | 000,001,683 | ---- | M] () -- F:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2001-10-26 17:45:16 | 000,000,742 | ---- | M]) - F:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - F:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - F:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.) O2 - BHO: (free-downloads.net Toolbar) - {ecdee021-0d17-467f-a1ff-c7a115230949} - F:\Program Files\free-downloads.net\prxtbfre0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - F:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - F:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (free-downloads.net Toolbar) - {ecdee021-0d17-467f-a1ff-c7a115230949} - F:\Program Files\free-downloads.net\prxtbfre0.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (uTorrentBar Toolbar) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - F:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (free-downloads.net Toolbar) - {ECDEE021-0D17-467F-A1FF-C7A115230949} - F:\Program Files\free-downloads.net\prxtbfre0.dll (Conduit Ltd.) O4 - HKLM..\Run: [Alcmtr] F:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [avast5] F:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [GEST] File not found O4 - HKLM..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NokiaMServer] F:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia) O4 - HKLM..\Run: [NvCplDaemon] F:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] F:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NWEReboot] File not found O4 - HKLM..\Run: [nwiz] F:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [WinampAgent] F:\Program Files\Winamp\winampa.exe () O4 - HKCU..\Run: [] File not found O4 - HKCU..\Run: [AlcoholAutomount] F:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe (Alcohol Soft Development Team) O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] F:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe (Nero AG) O4 - HKCU..\Run: [DAEMON Tools Lite] F:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKCU..\Run: [GAINWARD] F:\Program Files\EXPERTool\TBPanel.exe (Gainward Co.) O4 - HKCU..\Run: [Steam] F:\Program Files\Steam\Steam.exe (Valve Corporation) O4 - Startup: F:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk = F:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated) O4 - Startup: F:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Exif Launcher S.lnk = F:\Program Files\FinePixViewerS\QuickDCF2.exe (FUJIFILM Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 157 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 85.89.173.194 217.113.224.35 O20 - HKLM Winlogon: Shell - (Explorer.exe) - F:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: F:\Documents and Settings\Przemek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: F:\Documents and Settings\Przemek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-03 13:34:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-07-03 18:03:46 | 000,000,000 | -HSD | C] -- F:\RECYCLER [2011-07-03 18:03:13 | 000,000,000 | ---D | C] -- F:\_OTL [2011-07-03 18:00:14 | 000,580,096 | ---- | C] (OldTimer Tools) -- F:\Documents and Settings\Przemek\Pulpit\OTL.exe [2011-07-01 11:39:00 | 000,000,000 | ---D | C] -- F:\Program Files\Steam [2011-06-28 14:22:45 | 000,000,000 | ---D | C] -- F:\Documents and Settings\All Users\Menu Start\Programy\Mój wymarzony chłopak [2011-06-25 18:55:17 | 000,000,000 | ---D | C] -- F:\Documents and Settings\Przemek\Moje dokumenty\NeroVision [2011-06-19 06:19:58 | 000,000,000 | ---D | C] -- F:\Documents and Settings\All Users\Menu Start\Programy\City Interactive [2011-06-19 05:57:22 | 000,245,216 | ---- | C] (DT Soft Ltd.) -- F:\WINDOWS\System32\imgengine.dll [2011-06-19 05:47:50 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- F:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2011-06-17 21:28:00 | 000,000,000 | ---D | C] -- F:\Documents and Settings\All Users\Menu Start\Programy\So Blonde [2011-06-14 06:29:24 | 000,000,000 | RH-D | C] -- F:\Documents and Settings\Przemek\Recent [2011-06-09 05:36:20 | 000,000,000 | ---D | C] -- F:\Program Files\Common Files\Java [2011-06-09 05:35:58 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- F:\WINDOWS\System32\javaws.exe [2011-06-09 05:35:58 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- F:\WINDOWS\System32\javaw.exe [2011-06-09 05:35:58 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- F:\WINDOWS\System32\java.exe [2011-06-03 19:40:11 | 000,000,000 | ---D | C] -- F:\Documents and Settings\All Users\Dane aplikacji\Nokia [2011-06-03 19:29:51 | 000,000,000 | ---D | C] -- F:\Documents and Settings\Przemek\Pulpit\Nowy folder [2011-06-03 18:15:09 | 000,000,000 | ---D | C] -- F:\Documents and Settings\Przemek\Dane aplikacji\Nokia Ovi Suite [2011-05-22 09:52:51 | 000,311,296 | RHS- | C] (Created with WinAutomation (http://www.WinAutomation.com)) -- F:\Documents and Settings\Przemek\Dane aplikacji\Readar_sl.exe [2011-02-26 13:38:38 | 003,056,008 | ---- | C] (Ask) -- F:\Program Files\Common Files\AskToolbarInstaller.exe [2009-07-08 21:33:11 | 008,824,216 | ---- | C] (Mozilla) -- F:\Program Files\Firefox Setup 3.5.exe [2009-06-03 15:03:54 | 007,658,952 | ---- | C] (DT Soft Ltd.) -- F:\Program Files\daemon4304-lite_[www.programosy.pl].exe [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-07-03 18:05:04 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) -- F:\WINDOWS\gdrv.sys [2011-07-03 18:04:51 | 000,002,048 | --S- | M] () -- F:\WINDOWS\bootstat.dat [2011-07-03 18:00:23 | 000,580,096 | ---- | M] (OldTimer Tools) -- F:\Documents and Settings\Przemek\Pulpit\OTL.exe [2011-06-28 14:25:26 | 000,000,453 | ---- | M] () -- F:\Documents and Settings\All Users\Pulpit\Mój wymarzony chłopak.lnk [2011-06-25 18:57:54 | 000,000,116 | ---- | M] () -- F:\WINDOWS\NeroDigital.ini [2011-06-25 18:47:39 | 000,041,984 | ---- | M] () -- F:\Documents and Settings\Przemek\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-06-25 13:56:25 | 000,002,206 | ---- | M] () -- F:\WINDOWS\System32\wpa.dbl [2011-06-24 14:41:16 | 000,002,355 | ---- | M] () -- F:\Documents and Settings\Przemek\Pulpit\BabasChess.lnk [2011-06-21 20:20:28 | 000,001,988 | ---- | M] () -- F:\Documents and Settings\Przemek\Moje dokumenty\Dokument.rtf [2011-06-19 06:19:58 | 000,000,855 | ---- | M] () -- F:\Documents and Settings\All Users\Pulpit\Sniper Ghost Warrior.lnk [2011-06-19 05:47:50 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- F:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2011-06-19 05:34:21 | 000,503,490 | ---- | M] () -- F:\WINDOWS\System32\perfh015.dat [2011-06-19 05:34:21 | 000,444,144 | ---- | M] () -- F:\WINDOWS\System32\perfh009.dat [2011-06-19 05:34:21 | 000,090,712 | ---- | M] () -- F:\WINDOWS\System32\perfc015.dat [2011-06-19 05:34:21 | 000,072,402 | ---- | M] () -- F:\WINDOWS\System32\perfc009.dat [2011-06-17 22:03:09 | 000,000,668 | ---- | M] () -- F:\Documents and Settings\All Users\Pulpit\So Blonde.lnk [2011-06-16 20:15:23 | 000,001,374 | ---- | M] () -- F:\WINDOWS\imsins.BAK [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-06-28 14:25:26 | 000,000,453 | ---- | C] () -- F:\Documents and Settings\All Users\Pulpit\Mój wymarzony chłopak.lnk [2011-06-21 20:20:28 | 000,001,988 | ---- | C] () -- F:\Documents and Settings\Przemek\Moje dokumenty\Dokument.rtf [2011-06-19 06:19:58 | 000,000,855 | ---- | C] () -- F:\Documents and Settings\All Users\Pulpit\Sniper Ghost Warrior.lnk [2011-06-17 22:03:09 | 000,000,668 | ---- | C] () -- F:\Documents and Settings\All Users\Pulpit\So Blonde.lnk [2011-06-16 16:17:39 | 000,001,374 | ---- | C] () -- F:\WINDOWS\imsins.BAK [2011-05-22 10:41:54 | 000,175,616 | ---- | C] () -- F:\WINDOWS\System32\unrar.dll [2011-02-28 14:37:03 | 000,022,328 | ---- | C] () -- F:\Documents and Settings\Przemek\Dane aplikacji\PnkBstrK.sys [2011-02-26 14:44:13 | 000,369,528 | ---- | C] () -- F:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2011-02-26 13:38:39 | 000,444,283 | ---- | C] () -- F:\Program Files\Common Files\WinPcapNmap.exe [2010-12-04 14:17:58 | 000,000,001 | ---- | C] () -- F:\WINDOWS\System32\SI.bin [2010-11-12 19:22:31 | 000,000,664 | ---- | C] () -- F:\WINDOWS\System32\d3d9caps.dat [2010-10-23 16:55:56 | 000,004,096 | ---- | C] () -- F:\WINDOWS\d3dx.dat [2010-08-08 12:13:15 | 000,000,004 | ---- | C] () -- F:\WINDOWS\System32\proc-1830267680.bin [2010-07-29 17:24:39 | 000,000,132 | ---- | C] () -- F:\Documents and Settings\Przemek\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2010-07-28 06:04:23 | 000,354,816 | ---- | C] () -- F:\WINDOWS\System32\psisdecd.dll [2010-03-21 11:12:13 | 000,094,208 | ---- | C] () -- F:\WINDOWS\System32\zmbv.dll [2010-01-27 04:09:02 | 000,053,299 | ---- | C] () -- F:\WINDOWS\System32\pthreadVC.dll [2009-12-10 20:01:57 | 000,001,061 | ---- | C] () -- F:\WINDOWS\eReg.dat [2009-11-24 15:08:10 | 000,000,050 | ---- | C] () -- F:\WINDOWS\System32\bridf08b.dat [2009-11-24 15:06:06 | 000,031,567 | ---- | C] () -- F:\WINDOWS\maxlink.ini [2009-09-28 18:22:41 | 000,043,520 | ---- | C] () -- F:\WINDOWS\System32\CmdLineExt03.dll [2009-09-19 17:33:10 | 000,021,840 | ---- | C] () -- F:\WINDOWS\System32\SIntfNT.dll [2009-09-19 17:33:10 | 000,017,212 | ---- | C] () -- F:\WINDOWS\System32\SIntf32.dll [2009-09-19 17:33:10 | 000,012,067 | ---- | C] () -- F:\WINDOWS\System32\SIntf16.dll [2009-09-03 16:23:19 | 000,601,791 | ---- | C] () -- F:\Program Files\NiBiTor.v5.2.zip [2009-09-03 14:59:45 | 018,786,416 | ---- | C] () -- F:\Program Files\WDM_405.zip [2009-07-19 10:46:38 | 000,041,984 | ---- | C] () -- F:\Documents and Settings\Przemek\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-07-08 21:33:48 | 000,000,000 | ---- | C] () -- F:\WINDOWS\nsreg.dat [2009-07-05 16:58:53 | 000,000,157 | ---- | C] () -- F:\WINDOWS\disney.ini [2009-07-05 16:58:49 | 000,000,194 | ---- | C] () -- F:\WINDOWS\disneysy.ini [2009-06-30 16:54:30 | 000,000,062 | ---- | C] () -- F:\WINDOWS\Sierra.ini [2009-06-06 19:18:37 | 001,309,117 | ---- | C] () -- F:\Program Files\wrar380pl.exe [2009-06-03 15:47:10 | 000,000,116 | ---- | C] () -- F:\WINDOWS\NeroDigital.ini [2009-06-03 15:40:20 | 000,000,074 | ---- | C] () -- F:\WINDOWS\WebUpdateSvc.INI [2009-06-03 15:31:42 | 000,000,131 | ---- | C] () -- F:\WINDOWS\ChssBase.ini [2009-06-03 15:28:18 | 000,004,293 | ---- | C] () -- F:\WINDOWS\ODBCINST.INI [2009-06-03 15:27:19 | 000,133,280 | ---- | C] () -- F:\WINDOWS\System32\FNTCACHE.DAT [2009-06-03 15:10:40 | 000,000,404 | ---- | C] () -- F:\WINDOWS\BRWMARK.INI [2009-06-03 15:10:40 | 000,000,027 | ---- | C] () -- F:\WINDOWS\BRPP2KA.INI [2009-06-03 14:18:48 | 000,000,526 | ---- | C] () -- F:\WINDOWS\ODBC.INI [2009-06-03 13:46:23 | 000,049,152 | R--- | C] () -- F:\WINDOWS\System32\ChCfg.exe [2009-06-03 13:36:22 | 000,002,048 | --S- | C] () -- F:\WINDOWS\bootstat.dat [2009-06-03 13:32:21 | 000,021,856 | ---- | C] () -- F:\WINDOWS\System32\emptyregdb.dat [2008-12-03 09:39:45 | 001,703,936 | ---- | C] () -- F:\WINDOWS\System32\nvwdmcpl.dll [2008-12-03 09:39:45 | 001,630,208 | ---- | C] () -- F:\WINDOWS\System32\nwiz.exe [2008-12-03 09:39:45 | 001,486,848 | ---- | C] () -- F:\WINDOWS\System32\nview.dll [2008-12-03 09:39:45 | 001,339,392 | ---- | C] () -- F:\WINDOWS\System32\nvdspsch.exe [2008-12-03 09:39:45 | 001,019,904 | ---- | C] () -- F:\WINDOWS\System32\nvwimg.dll [2008-12-03 09:39:45 | 000,466,944 | ---- | C] () -- F:\WINDOWS\System32\nvshell.dll [2008-12-03 09:39:45 | 000,442,368 | ---- | C] () -- F:\WINDOWS\System32\nvappbar.exe [2008-12-03 09:39:45 | 000,425,984 | ---- | C] () -- F:\WINDOWS\System32\keystone.exe [2008-12-03 09:39:45 | 000,007,237 | ---- | C] () -- F:\WINDOWS\cadx2.ini [2008-10-07 10:13:30 | 000,197,912 | ---- | C] () -- F:\WINDOWS\System32\physxcudart_20.dll [2008-10-07 10:13:22 | 000,058,648 | ---- | C] () -- F:\WINDOWS\System32\AgCPanelTraditionalChinese.dll [2008-10-07 10:13:20 | 000,058,648 | ---- | C] () -- F:\WINDOWS\System32\AgCPanelSwedish.dll [2008-10-07 10:13:20 | 000,058,648 | ---- | C] () -- F:\WINDOWS\System32\AgCPanelSpanish.dll [2008-10-07 10:13:20 | 000,058,648 | ---- | C] () -- F:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll [2008-10-07 10:13:20 | 000,058,648 | ---- | C] () -- F:\WINDOWS\System32\AgCPanelPortugese.dll [2008-10-07 10:13:20 | 000,058,648 | ---- | C] () -- F:\WINDOWS\System32\AgCPanelKorean.dll [2008-10-07 10:13:20 | 000,058,648 | ---- | C] () -- F:\WINDOWS\System32\AgCPanelJapanese.dll [2008-10-07 10:13:20 | 000,058,648 | ---- | C] () -- F:\WINDOWS\System32\AgCPanelGerman.dll [2008-10-07 10:13:20 | 000,058,648 | ---- | C] () -- F:\WINDOWS\System32\AgCPanelFrench.dll [2008-04-14 23:16:20 | 000,001,804 | ---- | C] () -- F:\WINDOWS\System32\Dcache.bin [2006-12-31 07:57:08 | 000,004,569 | ---- | C] () -- F:\WINDOWS\System32\secupd.dat [2003-04-08 11:40:22 | 000,005,679 | ---- | C] () -- F:\WINDOWS\System32\OUTLPERF.INI [2002-10-06 21:42:58 | 000,237,568 | ---- | C] () -- F:\WINDOWS\System32\OggDS.dll [2002-10-05 02:04:26 | 000,921,600 | ---- | C] () -- F:\WINDOWS\System32\vorbisenc.dll [2002-10-05 02:04:26 | 000,188,416 | ---- | C] () -- F:\WINDOWS\System32\VORBIS.DLL [2002-10-05 02:04:18 | 000,045,056 | ---- | C] () -- F:\WINDOWS\System32\OGG.DLL [2001-10-26 18:15:16 | 000,503,490 | ---- | C] () -- F:\WINDOWS\System32\perfh015.dat [2001-10-26 18:15:16 | 000,313,828 | ---- | C] () -- F:\WINDOWS\System32\perfi015.dat [2001-10-26 18:15:16 | 000,090,712 | ---- | C] () -- F:\WINDOWS\System32\perfc015.dat [2001-10-26 18:15:16 | 000,034,990 | ---- | C] () -- F:\WINDOWS\System32\perfd015.dat [2001-08-23 15:00:00 | 013,107,200 | ---- | C] () -- F:\WINDOWS\System32\oembios.bin [2001-08-23 15:00:00 | 000,004,463 | ---- | C] () -- F:\WINDOWS\System32\oembios.dat [2001-08-17 23:30:24 | 000,444,144 | ---- | C] () -- F:\WINDOWS\System32\perfh009.dat [2001-08-17 23:30:24 | 000,272,128 | ---- | C] () -- F:\WINDOWS\System32\perfi009.dat [2001-08-17 23:30:24 | 000,028,626 | ---- | C] () -- F:\WINDOWS\System32\perfd009.dat [2001-08-17 23:30:22 | 000,072,402 | ---- | C] () -- F:\WINDOWS\System32\perfc009.dat [2001-08-17 23:15:38 | 000,046,258 | ---- | C] () -- F:\WINDOWS\System32\mib.bin [2001-07-22 00:36:48 | 000,218,003 | ---- | C] () -- F:\WINDOWS\System32\dssec.dat [2001-07-22 00:36:04 | 000,673,088 | ---- | C] () -- F:\WINDOWS\System32\mlang.dat [2001-07-22 00:24:16 | 000,000,741 | ---- | C] () -- F:\WINDOWS\System32\noise.dat < End of report >